Skip to content
OpenAdvisories

Vendor

Kubernetes

107 known vulnerabilities.

Products

Kubernetes 54 ingress-nginx 18 Kubelet 7 Kubernetes ingress-nginx 4 Minikube 3 Image Builder 3 Kubernetes Java Client 2 Kubernetes Secrets Store CSI Driver 2 kube-apiserver 2 kubernetes-client/java 1 azure-file-csi-driver 1 k8s.gcr.io/defaultbackend 1 kubernetes-csi external-provisioner 1 kubernetes-csi external-snapshotter 1 kubernetes-csi external-resizer 1 aws-iam-authenticator 1 kops 1 secrets-store-csi-driver 1 Kubernetes CSharp Client 1 CSI Driver for NFS 1 csi-proxy 1 secrets-store-sync-controller 1 CSI Snapshotter 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-1974 Public exploit Scanner template EPSS 99%

    ingress-nginx admission controller RCE escalation

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secret…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go